ubuntu解锁不走我的PAM

170fangjun

最近做一个Linux下的登录管理，用PAM做。
登录是控制住了，但是锁屏之后解锁却不走我的PAM，而走了 pam_unix.so
求大侠指导

170fangjun

1. /* expected hook */
   
2. MY_PAM_EXTERN int pam_sm_setcred( pam_handle_t *pamh, int flags, int argc, const char **argv )
   
3. {
   
4. 
   
5.         DPRINT(LOG_DEBUG, "进入pam_sm_setcred()   flags:%d  argc :%d ",flags,argc);
   
6.         int nret = PAM_SUCCESS, *pret;
   
7.         pret = &nret;
   
8.         pam_get_data(pamh, "sample_setcred_return", (const void **)&pret);
   
9.         return *pret;
   
10. 
    
11. 
    
12.     //return PAM_AUTH_ERR;
    
13. }
    
14. 
    
15. MY_PAM_EXTERN int pam_sm_chauthtok(pam_handle_t *pamh, int flags,
    
16.                                 int argc, const char **argv)
    
17. {
    
18.         DPRINT(LOG_DEBUG, "进入pam_sm_chauthtok()   flags:%d  argc :%d ",flags,argc);
    
19.         return PAM_SUCCESS;
    
20. }
    
21. MY_PAM_EXTERN int pam_sm_acct_mgmt(pam_handle_t *pamh, int flags, int argc, const char **argv)
    
22. {
    
23.         DPRINT(LOG_DEBUG, "进入pam_sm_acct_mgmt()   flags:%d  argc :%d ",flags,argc);
    
24.     return PAM_SUCCESS;
    
25. }
    
26. 
    
27. MY_PAM_EXTERN int pam_sm_open_session(pam_handle_t *pamh,int flags,int argc,const char **argv)
    
28. {
    
29.         DPRINT(LOG_DEBUG, "进入pam_sm_open_session()   flags:%d  argc :%d ",flags,argc);
    
30.         return PAM_SUCCESS;
    
31. }
    
32. 
    
33. MY_PAM_EXTERN int pam_sm_close_session(pam_handle_t *pamh,int flags,int argc,const char **argv)
    
34. {
    
35.         DPRINT(LOG_DEBUG, "进入pam_sm_open_session()   flags:%d  argc :%d ",flags,argc);
    
36.         return PAM_SUCCESS;
    
37. }
    
38. /* expected hook, this is where custom stuff happens */
    
39. MY_PAM_EXTERN int pam_sm_authenticate( pam_handle_t *pamh, int flags,int argc, const char **argv )
    
40. {
    
41.         DPRINT(LOG_DEBUG, "进入pam_sm_authenticate()   flags:%d  argc :%d ",flags,argc);
    
42.     int retval;
    
43. 
    
44.     const char* pUsername = NULL;
    
45.     const char *pPassword = NULL;
    
46.     const char *prompt = NULL;
    
47. 
    
48. 
    
49.     retval = pam_get_user(pamh, &pUsername, "sec管控帐号: ");
    
50.     DPRINT(LOG_DEBUG, "获取管控帐号:%s",pUsername);
    
51.     /// simplog.writeLog(SIMPLOG_DEBUG, "Welcome: %s", pUsername);
    
52.     if (retval != PAM_SUCCESS)
    
53.     {
    
54.         pam_error(pamh, "获取sec管控帐号失败");
    
55.         return retval;
    
56.     }
    
57.     retval = pam_get_authtok(pamh, PAM_AUTHTOK, &pPassword, prompt);
    
58.     //    retval = pam_get_authtok(pamh, PAM_OLDAUTHTOK, &pPassword, prompt);        ///////   ok !
    
59.     //    retval = pam_get_authtok_noverify(pamh, &pPassword, prompt);
    
60.     if(retval != PAM_SUCCESS)
    
61.     {
    
62.         pam_info(pamh, "获取sec认证密码失败");
    
63.         return retval;
    
64.     }
    
65. 
    
66. 
    
67.     char cmd[1024];
    
68.     char errMsg[512];
    
69.     sprintf(cmd, "export DISPLAY=:0.0;%s %s %s %s", "LoginAgent", H_ToKen, pUsername, pPassword);
    
70.     memset(errMsg, 0, 512);
    
71. 
    
72.     //pam_info(pamh, "cmd: %s", cmd);
    
73.     if(0 != runLoginAgent(pamh, cmd, errMsg, 512))
    
74.     {
    
75.         pam_error(pamh, "sec 认证失败：%s", errMsg);
    
76.         return PAM_AUTH_ERR;      }
    
77.     else
    
78.     {
    
79.         pam_info(pamh, "sec 认证: 成功！");
    
80.     }
    
81.     int *pret = (int *)malloc(sizeof(int));
    
82.     *pret = PAM_SUCCESS;
    
83.     pam_set_data(pamh, "sample_setcred_return", (void *)pret, sample_pam_free);
    
84. 
    
85. #endif
    
86.     return PAM_SUCCESS;   /// 允许登录
    
87. }

复制代码

170fangjun

修改了 lightdm


auth    sufficient       mypam.so
account    sufficient      mypam.so